Privacy Policy

1. Introduction

Welcome to Stwart Lucas("we", "us", or "our"). We are committed to protecting your privacy and ensuring your personal data is handled responsibly. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.

By using our website at https://stewartlucas.com, subscribing to our newsletter, or interacting with our services, you agree to the terms described in this policy.

2. Data We Collect

We collect the following categories of personal data:

2.1 Information You Provide

• Name and email address (when subscribing or creating an account)
• Dietary preferences and health-related survey answers (when requesting personalised content)
• Any other information you voluntarily submit through forms on our site

2.2 Information Collected Automatically

When you subscribe to our newsletter or browse our website, we automatically collect:

• IP address — used to determine your approximate geographic location (country, city, region)
• Browser type and version — parsed from your User-Agent header
• Operating system — parsed from your User-Agent header
• Device type — whether you are using a desktop, mobile, or tablet device
• Screen resolution — the display resolution of your device
• Preferred language — your browser's language setting
• Timezone — your local timezone
• Referrer URL — the website you visited immediately before ours
• Page URL — which page on our site you were viewing
• Date and time — when the interaction occurred

2.3 Geolocation Data

We use your IP address to determine your approximate location (country, city, and region) using a third-party geolocation service (ip-api.com). This data is used for analytics purposes only and is not precise enough to identify your exact street address or location.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Newsletter delivery — to send you recipes, diet plans, and nutritional content you subscribed to
• Personalisation — to tailor content recommendations based on your dietary preferences
• Analytics and improvement — to understand our audience demographics, popular content, and website performance
• Security — to detect and prevent abuse, fraud, or malicious activity
• Legal compliance — to comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent — when you voluntarily subscribe to our newsletter or submit a form, you consent to the processing of your data as described in this policy
• Legitimate interest — we have a legitimate interest in understanding our audience through analytics to improve our services
• Contract performance — processing necessary to provide the services you requested (e.g., personalised diet plans)

5. Data Sharing & Third Parties

We do not sell your personal data. We may share limited data with the following third-party services:

• ip-api.com — IP geolocation service (receives your IP address to return location data)
• Resend — email delivery service (receives your email address and name to send newsletters)
• Google Analytics — website analytics (receives anonymised browsing data)
• Google Gemini API — AI content generation (does not receive your personal data)

All third-party processors are contractually bound to protect your data and use it only for the stated purposes.

6. Data Retention

We retain your subscriber data for as long as you remain subscribed to our newsletter. If you unsubscribe, your email will be added to our suppression list, and your subscriber intelligence data will be deleted within 30 days. Account data for registered users is retained until you request account deletion.

7. Your Rights

Under GDPR and CCPA, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to the processing of your data for marketing purposes
• Right to withdraw consent — withdraw consent at any time by unsubscribing or contacting us

To exercise any of these rights, please contact us at privacy@stewartlucas.com.

8. Cookies

We use essential cookies to maintain your session and remember your preferences (e.g., newsletter popup dismissal). We also use analytics cookies via Google Analytics to understand how visitors interact with our website. You can disable cookies through your browser settings at any time, though this may affect some features of our site.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted database connections, secure authentication mechanisms, and access controls on administrative interfaces.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: